To learn more about Secret OPerationS: https://github.com/getsops/sops

By enabling global-sops-mode, sops-mode will try to enable itself automatically when we enter a SOPS encrypted file. When you see that sops is enabled you can use sops-edit-file to decrypt the file. After modifications have been made you can save with sops-save-file or discard modifications with sops-cancel.

elpaca + use-package

(defun sops-setup-env ()
  "Set environment variable for SOPS"
  (setenv "AWS_PROFILE" "production"))

(use-package sops
  :ensure (:type git :host github :repo "djgoku/sops")
  :bind (("C-c C-c" . sops-save-file)
         ("C-c C-k" . sops-cancel)
         ("C-c C-d" . sops-edit-file))
  :init
  (setq sops-before-encrypt-decrypt-hook 'sops-setup-env)
  (global-sops-mode 1))

• Add a variable to auto-decrypt when we enter an encrypted file when `global-sops-mode` is enabled.
• Create new SOPS encrypted files via sops-mode.
• If we fail to encrypt (sops < 3.9), we need to revert changes to original-file to encrypted state and switch back to decrypted buffer.